CVE-2022-36372
High
Description
Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS7.5
Exploit probability—
ProductIntel Nuc 8 Compute Element Cm8i3cb4n Firmware
PublishedAug 11, 2023
First seenAug 11, 2023
Weakness typeCWE-92CWE-92
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_8_compute_element_cm8i3cb4n_firmware | No range specified | — |
| intel nuc_8_compute_element_cm8i5cb8n_firmware | No range specified | — |
| intel nuc_8_compute_element_cm8i7cb8n_firmware | No range specified | — |
| intel nuc_8_compute_element_cm8ccb4r_firmware | No range specified | — |
| intel nuc_8_compute_element_cm8pcb4r_firmware | No range specified | — |
| intel nuc_pro_kit_nuc8i3pnb_firmware | No range specified | — |
| intel nuc_pro_kit_nuc8i3pnh_firmware | No range specified | — |
| intel nuc_pro_kit_nuc8i3pnk_firmware | No range specified | — |
| intel nuc_pro_board_nuc8i3pnb_firmware | No range specified | — |
| intel nuc_pro_board_nuc8i3pnh_firmware | No range specified | — |
| intel nuc_pro_board_nuc8i3pnk_firmware | No range specified | — |
| intel nuc_rugged_kit_nuc8cchb_firmware | No range specified | — |
| intel nuc_rugged_kit_nuc8cchbn_firmware | No range specified | — |
| intel nuc_rugged_kit_nuc8cchkrn_firmware | No range specified | — |
| intel nuc_rugged_kit_nuc8cchkr_firmware | No range specified | — |
| intel nuc_pro_compute_element_nuc9v7qnb_firmware | No range specified | — |
| intel nuc_pro_compute_element_nuc9v7qnx_firmware | No range specified | — |
| intel nuc_pro_compute_element_nuc9vxqnb_firmware | No range specified | — |
| intel nuc_pro_compute_element_nuc9vxqnx_firmware | No range specified | — |
| intel nuc_business_nuc8i7hnkqc_firmware | No range specified | — |
| intel nuc_business_nuc8i7hvkva_firmware | No range specified | — |
| intel nuc_business_nuc8i7hvkvaw_firmware | No range specified | — |
| intel nuc_business_nuc8i7hvk_firmware | No range specified | — |
| intel nuc_business_nuc8i7hnk_firmware | No range specified | — |
| intel nuc_enthusiast_nuc8i7hnkqc_firmware | No range specified | — |
| intel nuc_enthusiast_nuc8i7hvkva_firmware | No range specified | — |
| intel nuc_enthusiast_nuc8i7hvkvaw_firmware | No range specified | — |
| intel nuc_enthusiast_nuc8i7hvk_firmware | No range specified | — |
| intel nuc_enthusiast_nuc8i7hnk_firmware | No range specified | — |
| intel nuc_kit_nuc8i7hnkqc_firmware | No range specified | — |
| intel nuc_kit_nuc8i7hvkva_firmware | No range specified | — |
| intel nuc_kit_nuc8i7hvkvaw_firmware | No range specified | — |
| intel nuc_kit_nuc8i7hvk_firmware | No range specified | — |
| intel nuc_kit_nuc8i7hnk_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.